AIRCRAFT FLIGHT RISK MEASURING SYSTEM 
AND METHOD OF OPERATION 

BACKGROUND OF THE INVENTION 

(a) Field of the Invention 

This invention relates a system for measuring aviation risks for improved aircraft 
safety and more particularly, but not by way of limitation, to an aircraft flight measuring 
system for providing a flight planning aid to a pilot, flight dispatcher and an 
owner/operator. The new aircraft flight measuring system calculates various risk factors 
and provides a summary report. The report can be used prior to flight time or during 
flight to aid in a decision to fly or not or to change a flight destination. 

(b) Discussion of Prior Art 

Prior to any aircraft flight under Federal Aviation Administration (FAA) 
regulations, a pilot must create a flight-plan, which identifies the specifics of the intended 
flight. The process can be performed on paper or using a number of different electronic 
methods including a microcomputer or the internet, serviced by web browser. This 
process is intended to ensure that the flight will arrive safely. In some cases, the pilot may 
elect to provide his or her flight plan to a Flight Service Station (FSS) for entry into the 
Air Traffic Control (ATC) system. However, for flights in Visual Meteorological 
Conditions (VMC), this is not mandatory. 

In flight planning, an implied risk management function is a weak link due to 
human factors, which may affect the pilot. For these reasons, the FAA has established a 
set of regulations in the Code of Federal Regulations (CFR) for commercial flight, which 
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require additional restrictions to be met before a flight can proceed. One of the 
restrictions includes a use of an independent dispatcher. The dispatcher must be someone 
not part of the required aircraft crew. The addition of the dispatcher is intended to provide 
an impartial review of the flight to aid in decision-making and enhance safety. 
Several non-governmental organizations exist for the purpose of educating the pilot 
population such as the Airplane Owners and Pilots Association (AOPA) and their sister 
agency the AOPA Air Safety Foundation. These groups provide free and low-cost 
seminars, videos and self-education materials to the general public. Several educational 
materials vendors including King Aviation Schools provide self-education materials, 
books, video and distance learning. In either case the pilot must already be aware of the 
risks inherent in flight, or be encouraged to take the courses and attend seminars, 
participation at these events is entirely voluntary although encouraged by the FAA. 

Commercial flight training companies such as Flight Safety International provide 
continuing education services for fleet operators and air-taxi services. These companies 
provide type certifications, re-currency and Crew-Resource-Management (CRM). A type- 
certification is an authorization to act as pilot-in-command of an aircraft, which has been 
determined by the FAA to require certain aircraft specific knowledge. Pilots are required 
to maintain "currency", which is a minimum of recent experience in specified operations 
such as instrument landings, night time takeoffs and landings. CRM are procedures and 
methods for multi-pilot cockpit operations, which attempt to reduce potential confusion 
or inter-personal effects in flight. These services are prohibitively expensive for single 
pilot-single aircraft operations and are specifically targeted at covering regulatory 
requirement. Risk management is not typically an explicit goal of these services. 
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During a flight, the pilot is completely in charge of the safety of the flight up to 
and including diverging from the CFRs when the pilot feels its necessary. In cases of a 
multi-person crew, the pilot may request and receive advice. However, only one person 
can be considered the Pilot-In-Command (PIC). Just as in the case of flight planning, 
human factors can affect a pilot's decision making. Also, this extends to the crew as 
well. There is significant anecdotal evidence of multi-pilot operations where all the crew 
members were unable to make correct decisions. In some cases a telecommunications 
system is available which allows the pilot to speak with ground personnel, however 
without in flight information the ground crew can rarely be of substantial timely help in 
resolving in-flight issues. 

Finally, although the CFR's require extensive record keeping for maintenance and 
pilot proficiency, there is no codified method or procedure for evaluating a pilot's skill 
for the management of risk. Safety training, recurrent training and other methods of 
educational instruction for pilots have shown some success in helping good pilots sharpen 
their skills. But, no training can predetermine all possible situations a pilot may 
encounter. 

In U.S. Patent 6,538,581 to Cowie and U.S. Patent 6,043,758 to Snyder, multiple 
methods for monitoring a flight in progress for collision risk are disclosed. In general, 
these disclosures are primarily focused on alerting a pilot, a ground controller or 
owner/operator of a flight in-progress and an impending collision with traffic or terrain. 
This information is not used to assess pre-flight risk factors or risk factors during flight. 
In U.S. Patent 5,710,559 to Krogmann, a systemic monitoring device and method is 
described. This system is focused on alerting a crew of the aircraft to an impending in- 
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flight issue and no pre-flight functions are provided. In U.S. Patent 6,223,143 to 
Weinstock, general risk management methodologies with software are described. The 
patent discloses the calculation of failure modes and associated risks using various 
computational algorithms. These algorithms are based on engineering analysis of possible 
point failures in the system and mission analyzed. The underlying vehicle specific failure 
information is static and can be reused. But, for each mission the user of the system must 
manually create a detailed analysis of the route and other relevant mission specific data. 
By contrast, the subject invention is intended to gather failure probabilities from 
historical accident data and uses existing flight-planning information to computationally 
create a mission data report used for risk factor analysis. 

None of the above-mentioned prior art patents specifically disclose the unique 
features, combination of components and function of the subject aircraft flight risk 
measuring system and method of operation as described herein. 

SUMMARY OF THE INVENTION 

In view of the foregoing, it is a primary objective of the subject invention to 
provide a pre-flight data report or an in-flight data report for an assessment of risk level 
associated with a particular flight segment. The report is used to assess data prior to 
flight or between take-off and landing. The information from the report can be used by a 
pilot, a flight dispatcher, an owner/operator or other interested party in making a better 
decision for overall flight planning. 
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Another object of the invention is to provide an impartial second opinion when 
flight safety can be improved. The report can also function as a monitor for the in-flight 
aircraft to allow a ground based dispatcher or other interested party to take preventative 
action when needed. 

Yet another object of the new aviation risk measuring system is to gather failure 
probabilities from historical accident data with existing flight-planning information for 
creating a flight mission data summary report. The summary report provides a risk factor 
analysis to a user. 

The subject invention provides a system and method of operation using an 
analysis of risk related to the flight of an aircraft. The system includes a source of flight 
planning data, a source of real-time aircraft data, historical flight information data, 
navigation and geographic data and a risk management server system computer to 
analyze the collected data. The method of operation uses the available data to generate a 
summary report of the level of risk associated with a planned flight or a cuirent flight 
activity if real-time data is available. 

These and other objects of the present invention will become apparent to those 
familiar with various systems and methods of measuring aircraft flight risks when 
reviewing the following detailed description, showing novel construction, combination, 
and elements as herein described, and more particularly defined by the claims, it being 
understood that changes in the various embodiments of invention are meant to be 
included as coming within the scope of the claims, except insofar as they may be 
precluded by the prior art. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The accompanying drawings illustrate complete preferred embodiments in the 
present invention according to the best modes presently devised for the practical 
application of the principles thereof, and in which: 

FIG. 1 is a diagram illustrating broadly the subject aircraft flight risk measuring 

system. 

FIG. 2 is a logic diagram illustrating the process by which a user interacts with the 

system. 

FIG. 3 is a logic diagram illustrating the process by which the aircraft flight 
measuring system watches an in-progress flight to determine changes in risk factors. 

FIG. 4 is a logic diagram illustrating the process by which the system calculates 
the risk profile and generates a report. 

FIG. 5 illustrates a logic diagram used to verify one or more algorithms used for a 
categorization of accident data and flight plans. 

FIG. 6 shows two logic diagrams illustrating processes used to create and select a 
categorization algorithm. 

FIG. 7 illustrates a logic diagram by which an accident database is converted into 
the quantized database. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

In FIG. 1, the aircraft flight measuring system is shown having general reference 
numeral 10. The system 10 broadly includes a Risk Management Computer Server 
System (RMSS) computer 200 with access to an accident history database 210, access to 
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flight navigation database 220 and access to a non-static database 230. The RMSS 
computer 200 has a two-way communication 120 with a user's computer 100, which 
provides an interface for a user 1 10 to access the system's computer 200. Also, the 
RMSS computer 200 provides for two-way communication 240 with an aircraft 230 prior 
to flight time and during flight. During flight, the aircraft 230 can communicate flight 
progress and various situation data to the RMSS computer 200. 

The RMSS computer 200 can be any computer, which can run software and 
algorithms specific to the system 10 as described herein. The RMSS computer 200 can 
include one or more general purpose microcomputers with an operating system 
configured to run software which handles queries from the user 1 10 and has access to the 
databases 210, 220 and 230. Also, the computer 200 has access to various articles, 
training material and other information sources for risk management education when 
reports are presented. The system is also programmed to identify and input material that 
is relevant to a proposed flight. 

The accident history database 210 or also called a quantized risk factor database is 
constructed from accident reports from NTSB records, indexed and stored in a manner 
which allows for arbitrary searches of the records. Also, additional databases can be 
included from summaries of accident data such as that provided by the AOPA Air Safety 
Foundation Nail Report, or data from non-government and international accident 
investigation agencies. 

The navigation database 220 consists of geographical information, particularly 
terrain elevation data, ground cover and other landform data which may have risk 
implications, airspace data, radio navigation aids, waypoints and preferred routes. Also, 
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the database 220 includes information about airports including types and quality of 
instrument approaches as well as field services available and other relevant data points 
which have risk implications. 

The non-static database 230 provides live information of primary importance such 
as weather data with high reliability forecasts covering a time period during the flight of 
the aircraft 230. Additional data may include current traffic flow information in and 
around the flight of the aircraft 230 from the National Airspace System (NAS) and any 
other data, which may change rapidly and may effect the flight of aircraft 230. 

The user 1 10 can access the RMSS computer 200 through his or her computer 100 
or another data communication terminal, which can include a cell phone, a Personal 
Digital Assistant (PDA) or the Internet. The RMSS computer 200 also runs software 
which provides a text or graphical user interface and allows the user 1 10 to input flight 
planning data and to receive human readable summary reports. The computer 200 can 
also be more than one device, with a fixed ground based terminal used for primary pre- 
flight operations and a secondary terminal provided by a portable device and/or devices 
mounted in the aircraft 230 for use before or during flight. 

Where possible the RMSS computer 200 receives encoded data from the flight in 
progress of aircraft 230 via the two-way data communication 240. This feature enables 
the RMSS computer 230 to track the real operation of the aircraft 230 for comparison 
against the estimated flight plan, which was presented prior to flight While this feature is 
important, it is optional and is not required for all implementations of the present 
invention. But, it is useful for extending the capabilities and quality of aircraft flight risk 
management When the aircraft 230 is equipped with the necessary hardware and 
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software, it can generate and deliver a stream of data or a series of discrete reports to the 
RMSS computer 200, with the status and progress of the flight in real-time. 

In FIG. 2, a logic diagram shows a user interaction process for requesting and 
utilizing the risk management reports from the RMSS computer 200. When a pilot of the 
aircraft 230 or the user 1 1 0 is preparing for a flight, the computer 200, with 
accompanying software, is started at start 300 and a flight plan 3 1 0 is submitted. An enter 
flight plan 320 is encoded into the system and a send to RMSS 330 is sent to the RMSS 
computer 200. Obviously, the user will use the two-way data communication 120 and the 
pilot will use the two-way data communication 240. When die flight plan is received by 
the RMSS computer 200, it can be optionally stored or save profile 390 in a persistent 
database called a watch profiles 400. The data in the watch profiles can be used later 
during the actual flight of the aircraft 230. 

The user 1 10 or pilot of the aircraft 230 can then query the RMSS computer 200 
for a report generated from the data provided. A retrieve risk report 350 is now 
generated. The user or the pilot can then make a determination based on available data, 
including but not limited to the retrieve risk report 350 on whether the flight is acceptable 
360 or not. If the risk report 350 is unacceptable because the calculated risk is too high, 
the user or pilot may elect to modify the flight plan 380 and submit a new plan for 
analysis. The process described above is then repeated. If the user or pilot is satisfied 
with the proposed flight, the process is completed and done 370. 

In FIG. 3, a logic diagram illustrates a process by which the RMSS computer 200 
can be used to monitor flights in progress for changes in risk factors. This is an optional 
feature and is not necessary for basic operation of the system 1 0. When the aircraft 230 is 
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equipped as described above with the two-way communication 240 and the flight begins 
410, the RMSS computer 200 is activated and the flight plan previously entered into the 
system is accessed. A signal from the aircraft causes the RMSS computer to start a new 
program 510, load software and/or any other actions required to perform the necessary 
calculations. 

The first action or find profile 520 is taken to find the stored flight plan in the 
watch profiles 400. The records in this database contain the details of the flight plan as 
entered, calculated risk factors from the original flight plan, and references to any non 
static data used for the calculation such as weather reports. 

With the watch profiles 400 located, the server computer 200 begins a monitoring 
function. When a report or a continuous stream of data is received from the monitored 
aircraft 230, the computer 200 compares a compare profile 530 of the real-time flight 
data against the watch profiles 400 for any discrepancies, changes in the risk factors and 
changes in the non-static data. If there is sufficient a differential between the compare 
profile 530 and the flight data 420 received the computer 200 recalculates risk change 
540. If the risk change 540 calculation is sufficiently different from an exceed threshold 
550, the computer 200 sends an issue alert 560 signal to the user's computer 100 or the 
aircraft 230. 

Once the issue alert 560 signal exists, the RMSS computer updates the watch 
profiles 400 records with a set new threshold 570 for future comparisons. The watch 
profiles 400 now retains the original risk calculation. Also user preferences may be set to 
request alerts at any time where the current risk calculation exceeds a threshold over the 
last risk calculation or the original calculation. In certain cases as requested by the user 
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1 10, the original threshold may be retained and the system will differentiate between risk 
calculates that exceed the new threshold 570 and the original threshold. Once the risk 
calculations are complete, the computer 200 checks for an end of flight condition or flight 
ended 580. If the flight is completed, the process is now stopped 590 and is recorded. If 
the flight is still in progress, the process repeats itself and the compare profile 530 is 
started again. 

In FIG. 4, a logic diagram is shown describing a process by which the RMSS 
computer 200 creates a risk report from a flight plan when a request is received from the 
user's computer 100. When flight plan data 910 is received, the RMSS computer 200 
creates an execution thread, loads software and performs other actions to begin a process 
start 900. The first action is to provide a hash flight plan data 920. Hashing operations are 
a well known computer science strategy wherein a piece of data is converted into a 
smaller, quickly searchable value for retrieving a record marked with a hash key. The 
program software can then hash the request data and find a matching entry in the 
database. In this case, the hashing function is an operation which converts the raw flight 
plan data into a single alphanumeric 'hash key' which is also used to index the records in 
the accident database 440. The accident database 440 processes which records are 
matched by the hash-key and share common risk factors. The actual algorithm used for 
this process is generated by processes described below in this disclosure. One flight plan 
may generate one or more hash keys depending on the algorithm used and the optimal 
function of the RMSS computer 200 system. This hash is then used to search for a 
sampling of matching accident reports, which are selected into a randomized list. From 
this list, a number of reports are selected based on user preference for later display. 
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Once the hash key has been generated, the program creates a list of quantized risk 
match categories 930, which match the flight plan. Each match category 930 describes a 
closed set of historical accidents based on a common searchable and identifiable factor, 
with quantized risk data 970. The risk data 970 is based on historical accident 
information. The algorithm, which generates the match category 930, is generated by a 
process described below. 

With the list of categories compiled by the RMSS computer 200 a tally risk 
category data 940 is generated. This step provides a list of the risk factors. For each risk 
factor identified, a corresponding risk score stored in the quantized risk data 970 is read 
and used to rank each risk factor. An array is generated to hold and sort the risk factors. 
An education database 980 is then searched from get document references 950. The 
references may be various documents, hyperlinks, or other educational materials which 
are specific to an identified risk factor. The number of materials selected is based on user 
preference and may reflect a history of materials viewed by the user 110. 

With the accident reports, risk categories, risk score and educational material, an 
encode report 960 is rendered as a computerized summary report. The report may be a 
human readable text document, a HTML document or XML encoded data which can 
rendered by a data-terminal. The report contains the summarized total risk score, and 
detailed categories presented by rank, accident reports and educational materials. The 
report is then downloaded to save profile 390 and watch profiles 400. The program is 
then completed or done 990. 

In FIG. 5, a "boot-strap" process is generated to verify one or more algorithms 
used for a categorization of accident data and flight plans. The process is built 
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progressively using human input to automated categorization of records. The first step 
requires human input and verification of the operation of the algorithm. The process 
begins with start 1 100 and a selection of a statistically select subset A 1 1 10 from the 
accident history database 440. This data is then presented to the operator to create 
categorize records 1 120. Each record is categorized to provide a basis for training and/or 
selecting algorithms. Once this is complete the categorized records are used to generate 
candidate algorithm 1 130. This phase involves method steps described in logic diagram 
FIG. 6. Once a candidate algorithm 1 130 has been selected, a second statistically valid 
subset of the accident data or select subset Bl 140 is created. This subset is selected and 
executed to create an output set which is reviewed by the operator to check for validity. If 
the candidate algorithm is not an acceptable result 1150 then a new candidate is generated 
using the step of generate candidate 1 130. If the algorithm is acceptable, the process is 
complete and donel 160. 

In FIG. 6, two preferred methods are logic diagrammed for generating candidate 
algorithms. It should be mentioned that those skilled in the art of creating algorithms of 
this type will understand that there are other methodologies for creating or selecting an 
algorithm to perform the categorization of accident data as described herein. 

The first method for generating a categorization algorithm is shown as Process A. 
This process uses a neural-network filtering function. For a neural network to operate it 
must be 'trained' by the presentation of inputs and expected outputs. While this system 
refers to the neural net in a manner consistent with a software calculated implementation, 
it should be understand that a neural net may be embodied through fixed hardware, 
programmable logic, software algorithms or other methods as required for speed, 
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flexibility and other implementation considerations. The neural network is designed to 
accept the flight plan data, and output a list of applicable categories that match the flight 
plan. 

When accident data is available for use in the training process, the RMSS 
computer 200 is engaged and the program starts with start 600. The program selects a 
record from the set of data presented and processes the record into an input/output pair 
610, which is suitable for the structure of the neural net. The set of input/output 610 is 
presented to a set input/output on neural net 620 and then a training function is engaged 
to capture neural net changes 630, which are then stored for servicing user requests. If 
more accident data is available for training then the process is repeated for more reports 
640. When all of the data has been applied, the process is completed and stops 650. 

A second method is illustrated as Process B. This method is for preparing the 
system 10 utilizing a genetic algorithm process to create a non-linear filtering algorithm. 
The process uses selection and recombination operations to progressively improve an 
arbitrarily coded algorithm until it meets some threshold of acceptability, with a single 
algorithm being selected from a pool of algorithms. Each of the algorithms is encoded as 
a 'vector 9 , and each vector is executed to produce a result. 

The selection process begins when a set of data is selected to be applied and the 
software loaded at start 700. A set of pseudo-random vectors is generated to populate the 
initial vector space 710. Each vector is executed with the step of calculate vector results 
720 from the data set and produce a result set The result set is examined to select best 
vectors 730. If any vector meets the acceptable result 750, then the process is complete or 
done 760. If no vector is suitable, the best vectors are sent to recombine and mutate 
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vectors 740. This step produces a new pool of vectors and the process begins executing 
again at calculate vector results 720. 

In FIG. 7, a logic diagram is shown illustrating the process steps to create the 
quantized risk data 970 used for generating flight plan reports. The process begins at start 
1000. A set of historical accident data from accident database 440 is run initially and 
each time new accident data is added to the database as it becomes available. For each 
record, the system 10 uses one or more categorization record 1010 algorithms, as 
described above. The quantized risk data 970 is generated from build quantized entries 
1020. The records that contain the total number of accidents are selected by this category 
and the relationship between incidents, injuries and fatalities are compared. Also, records 
are compared that contain the total number of hours, operations, flights and operational 
data. From this data, a summary report with a percentage of chance risk of an accident 
per hour of flight operation is generated. The report is then completed and done 1030. 

While the invention has been particularly shown, described and illustrated in 
detail with reference to the preferred embodiments and modifications thereof, it should be 
understood by those skilled in the art that equivalent changes in form and detail may be 
made therein without departing from the true spirit and scope of the invention as claimed 
except as precluded by the prior art. 
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